CVE

CVE-2019-11539

P1⬤ KNOWN RANSOMWARE USE

Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability

Ivanti · Pulse Connect Secure and Pulse Policy Secure

Date added (CISA)

2021-11-03

Remediation due

2022-05-03

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands.